Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: RvqIzTUSf/a/nbTl5zzIDsvFTmmDYrKCnWTcq2GaniE=
Subject key identifier: F4:A6:F8:63:BE:51:23:39:F9:66:F9:B4:A5:35:F6:E0:CD:8F:46:92
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019922FA0BC20542896556544E0657B1D8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 1395
Signing time: Sun 07 Sep 2025 07:00:36 +0000
Manifest this update: Sun 07 Sep 2025 07:00:36 +0000
Manifest next update: Mon 08 Sep 2025 07:00:36 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: LKEfZ/XKO/kLNCTmxZNeQuTv7tUjaPkbTMTzZK2FyAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0b:c2:05:42:89:65:56:54:4e:06:57:b1:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Sep 7 07:00:36 2025 GMT
Not After : Sep 8 07:00:36 2025 GMT
Subject: CN=f4a6f863be512339f966f9b4a535f6e0cd8f4692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:c1:7d:f1:8e:7b:bc:ca:50:c1:a3:53:48:
20:ce:7a:9c:fc:e5:db:24:65:29:c2:be:9d:b6:71:
dc:b3:b7:fd:1e:4f:30:1a:eb:b9:67:c2:e4:1c:d9:
56:ca:b1:8d:c5:c1:c9:49:54:82:e7:34:9b:83:0d:
4f:5d:3c:ee:80:c2:3c:d1:bf:57:ac:28:31:72:c9:
3f:77:39:cc:28:fb:4a:37:4d:3a:0a:1f:cc:0f:87:
73:0f:dc:bb:9c:e4:80:73:59:2d:1f:99:b9:30:4c:
98:7c:d8:86:1b:88:eb:24:2f:55:3d:8a:35:40:aa:
b2:6f:03:8f:b1:6e:55:26:f3:c6:0e:33:cd:d1:81:
c3:1c:1c:eb:c4:e0:27:d4:3e:f4:91:6a:41:a0:31:
20:ce:a6:03:6f:32:9f:9f:f5:a8:a9:d7:8b:dd:2a:
6f:9b:a8:8b:b5:58:f4:bb:ba:21:7c:04:41:ef:5d:
45:35:08:31:84:95:04:28:b0:b0:ea:8c:b6:7b:23:
49:ce:e8:1b:0d:b3:18:00:16:e0:74:bd:6e:a7:31:
bd:79:6b:ec:c6:27:f7:19:59:12:5d:80:74:e4:50:
8e:10:b3:e8:19:9f:1a:54:e5:f0:bd:47:d6:1a:55:
d0:33:aa:fd:6c:ea:22:fc:51:de:57:b5:c2:ce:3e:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:F8:63:BE:51:23:39:F9:66:F9:B4:A5:35:F6:E0:CD:8F:46:92
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:61:2a:30:cd:16:c5:42:89:2f:e3:61:39:9c:c8:d5:7e:03:
a2:e7:eb:cc:0a:f5:67:3e:44:c7:a4:25:0e:f4:5b:9b:44:4b:
90:0c:6a:bd:d7:7d:d5:49:f4:a9:dc:9e:04:4e:1f:f6:f8:89:
4f:ee:74:ea:b9:65:aa:93:48:44:a3:3c:64:5b:3f:ef:e8:18:
d1:49:3b:b1:95:7d:98:26:44:3d:0c:fd:4a:7f:55:01:46:a4:
45:82:2d:5a:c6:58:3b:8e:21:af:2e:09:cd:ee:cb:a8:05:1d:
ff:3b:d1:3f:1e:2a:ae:2d:73:e8:4c:4d:99:33:67:ed:4e:d5:
20:75:bf:d0:8c:37:84:b2:f9:02:03:36:95:98:d7:10:db:dc:
92:f9:8f:98:53:4f:c2:42:00:a4:a7:e6:62:1f:9b:a1:02:ed:
b3:f7:5f:5c:30:c7:32:5e:8d:3c:2b:c0:49:37:9d:e8:90:0f:
72:f0:da:e3:f0:4b:33:00:26:1f:61:01:a4:23:d3:45:57:27:
59:ef:25:e9:cf:cc:df:9d:2a:19:b3:1f:4e:0b:0b:4e:5d:9a:
c8:3c:f0:22:10:6f:58:fd:68:b4:02:e0:da:4b:26:66:bf:aa:
9c:7b:8f:fb:13:25:68:40:87:8e:2d:a0:79:37:92:c2:c2:98:
8c:19:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:22 2025 by rpki-client